Muhannad Alsaif

A flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the file /api/products handler.php?action=save of the component Product Management. Executing a manipulation of the argument Product Id/Product Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used.

A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactions handler.php?action=save purchase of the component Purchase Records Handler. The manipulation of the argument Product Name/Product Code/Vendor Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /api/transactions handler.php?action=save sale of the component Sales Management Handler. The manipulation of the argument Hsn Code results in cross site scripting. It is possible to launch the attack remotely.